Access to server thru RWW

Hello Experts

I need to give a standard user in a SBS 2008 network access to the server.  I don't want to make the account a Network Admin because it is an outside user from the company.  The user can access the RWW, but the option to connect to server isn't there.

Is there a way to give this user server access thru RWW without making them a network admin?

Thanks.
Ray DrummondLan Administrator IIIAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Rob WilliamsConnect With a Mentor Commented:
What exactly do you want them to be able to do?

There are the remote server administrator tools. This allows them to administer the server without having direct access, however I suspect this is more control that you want to give:
XP:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e487f885-f0c7-436a-a392-25793a25bad7&displaylang=en#SystemRequirements
Vista:
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=9FF6E897-23CE-4A36-B7FC-D52065DE9960&displaylang=en
Win7:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=en

If you want to give them access to Active Directory but control what they want to do you can use delegation:
http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
0
 
ormerodrutterConnect With a Mentor Commented:
No. Only admin allows to RDP to SBS server, without using third party software/tool.

One thing you can do (although I am against the idea of allowing an ordinary user to mess with my SBS server, let alone an outsider!!) is to install something like VNC server on your SBS and VNC viewer on his computer, configure a password if you wish and he can connect this way.

VNC is more like an user support tool that he would take control of the mouse+keyboard and you can actually see what he is doing on the server monitor.
0
 
Ray DrummondLan Administrator IIIAuthor Commented:
They just need to be able to access a billing system on the server.  I don't want them doing anything else.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
ormerodrutterCommented:
No I don't think you can achieve your objective without giving him the Admin access. Shouldn't really installed the billing system on the server unless it is a client/server application.
0
 
Rob WilliamsCommented:
Agreed.
Why are you running the application on the server?
SBS is not intended as an application server. Remote access is for administration only and the server is optimized for background services not applications.
0
 
Ray DrummondLan Administrator IIIAuthor Commented:
It wasn't me.  This is a client that was picked up that already had a SBS in place.  The prior company installed it all and I'm just trying to make it work.
0
 
Rob WilliamsCommented:
The problem is the only way to run remote desktop is as an admin on SBS. Though you can limit some permissions this user needs to have admin to logon and full rights to run the application, access the program folder, the data file, and possibly the registry. Very difficult to restrict a user in this situation. You could create a new admin account and using deny permissions restrict access to much of the data, but they would still have the right to administer the server.
0
 
Ray DrummondLan Administrator IIIAuthor Commented:
Ok, so I guess I'll see what I can do about moving this billing solution to another computer.  They only have the one SBS on their network.  I really don't want here having any kind of access beyond what she absolutely needs.
0
 
Rob WilliamsCommented:
I can appreciate your predicament but perhaps a PC would be a better option.
0
 
Cr0n0sCommented:
Hello,

A workaround for this issue is to place the server in the computer group, give the user the required access , afterwards place the computer back in server group in AD.

The setting is stored.

grtz
Smartsys
0
 
Rob WilliamsCommented:
Ignoring the fact that moving OU's will not resolve the issue, if you place the SBS in the computer OU, group policy for computers will be applied and could cause all sorts of chaos on a DC.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.